CVE-2025-4422

EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module

CVSS 8.2 HIGHEPSS 0.2%CWE-787

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Produtos afetados

Insyde Software · InsydeH2O

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://support.lenovo.com/us/en/product_security/home https://www.insyde.com/security-pledge/sa-2025007/